From: shamrock@netcom.com (Lucky Green)
Date: Sat, 1 Jun 1996 07:28:55 +0800
To: Moltar Ramone <jlasser@rwd.goucher.edu>
Subject: Re: Java Crypto API questions
Message-ID: <v02120d10add4c726d6c2@[192.0.2.1]>
MIME-Version: 1.0
Content-Type: text/plain


At 8:15 5/31/96, Moltar Ramone wrote:

>My guess would be that the first of these two points answers the second.
>Everything is exportable -- except signed third-party security packages.
>My bet would be that the exportable code would not be more than RC4-40 or
>perhaps 1DES, but that a signed package would go to RC4-128, 3DES, and
>RSA-1024.  However, the signature on that package would be on the
>condition that the vendor/distributor of that package follow all export
>regulations.

Where does this leave foreign vendors? Will Sun sign the 3DES package of a
foreign vendor?


Disclaimer: My opinions are my own, not those of my employer.

-- Lucky Green <mailto:shamrock@netcom.com>
   PGP encrypted mail preferred.